[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Why is *splitting every word* is a shell security hole?
|
From: |
Greg Wooledge |
|
Subject: |
Re: Why is *splitting every word* is a shell security hole? |
|
Date: |
Wed, 21 Aug 2024 17:04:35 -0400 |
On Wed, Aug 21, 2024 at 20:57:46 +0200, alex xmb sw ratchev wrote:
> IFS+=h
>
> nm , thxx
>
> and you get to run it the next time the user uses `echo'.
VAR+=content is a bash extension, which would definitely not work in
the Bourne shells where splitting of literal words happened.